Disable secure pages in the Admin

For general questions and discussions specific to the AbleCommerce 7.0 Asp.Net product.
Post Reply
Mike718NY
Commodore (COMO)
Commodore (COMO)
Posts: 485
Joined: Wed Jun 18, 2008 5:24 pm

Disable secure pages in the Admin

Post by Mike718NY » Wed Aug 27, 2008 9:51 am

Is it possible to disable secure pages from being used in the admin?

https://www.website.com/Admin/Default.aspx

It adds overhead and slows the pages down.

User avatar
AbleMods
Master Yoda
Master Yoda
Posts: 5170
Joined: Wed Sep 26, 2007 5:47 am
Location: Fort Myers, Florida USA

Re: Disable secure pages in the Admin

Post by AbleMods » Wed Aug 27, 2008 10:45 am

Remove this line from the ~/App_Data/AbleCommerce.config file below the <securePages> tag. I believe that's all that is required although I wouldn't recommend it at all - any payment information viewed could be easily compromised by even the most novice packet sniffer.

Code: Select all

<add path="Admin" recurse="true" />
If performance is an issue, get a better host or more bandwidth instead of risking your business reputation. One is far more costly than the other in the long run.
Joe Payne
AbleCommerce Custom Programming and Modules http://www.AbleMods.com/
AbleCommerce Hosting http://www.AbleModsHosting.com/
Precise Fishing and Hunting Time Tables http://www.Solunar.com

Mike718NY
Commodore (COMO)
Commodore (COMO)
Posts: 485
Joined: Wed Jun 18, 2008 5:24 pm

Re: Disable secure pages in the Admin

Post by Mike718NY » Wed Aug 27, 2008 10:57 am

Thanks Joe,
yeah, I'm only paying $30.00 a month. Sometimes the site runs fast, but
other times pages could take over 40 seconds or more to load.
I would be willing to pay more for faster performance.

Mike718NY
Commodore (COMO)
Commodore (COMO)
Posts: 485
Joined: Wed Jun 18, 2008 5:24 pm

Re: Disable secure pages in the Admin

Post by Mike718NY » Fri Aug 29, 2008 10:18 am

I found a way to get around not using Secure pages for Credit Card info:

<files>
<!-- added these 2-->
<add path="Admin/Login.aspx" />
<add path="Admin/Orders/Payments/Default.aspx" />

<add path="Login.aspx" />
....

I also added admin login as secure. The admin is much faster now.

Post Reply